What is “ward@sw”?

February 10, 2014
Pinterest Stumbleupon Whatsapp

When I open Task Manager in Windows XP I noticed in the processes a whole bunch that are “ward@sw”….

  1. Oron J
    February 10, 2014 at 3:55 pm

    I've just googled ward@sw and could not find any reference to such a process. This makes it likely (though not certain) that it is malware. Download Process Explorer from http://technet.microsoft.com/en-gb/sysinternals/bb896653.aspx and run it, and it will allow you to locate the actual file. Once you find it, see if you can find out more about it. For example:
    Right click on it and choose "Properties". Click on the "Details" tab if there is one and you'll find information about the file, who wrote it etc.
    If the file is in a "temp" folder (e.g. "...appdatalocaltemp") then it is almost certainly a piece of malware and you can upload it to http://www.virustotal.com to have it tested. Otherwise, I suppose you could come back to us with more details and we'll try to help!

  2. Hovsep A
    February 10, 2014 at 11:26 am

    try to use sysinternals process explorer
    http://www.softpedia.com/get/System/System-Info/Process-Explorer.shtml
    find your ward@sw right click on it and use: check Virus Total
    if you right click and check properties you can get the path of the process